Head of Physical Security, 2LOD

Work Location:

Toronto, Ontario, Canada

Hours:

37.5

Line of Business:

Risk Management

Pay Details:

$115,600 - $163,200 CAD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs.

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Job Description:

Individual Role Accountabilities and Decision Authorities / Breadth, Depth & Scope

Enterprise mandate.

• •Lead the design, implementation, and ongoing enhancement of the enterprise physical security risk management program, establishing enterprise-level governance, policies, standards, risk appetite, methodologies, and practices that strengthen TD’s ability to protect its people, customers, premises, physical assets, and critical operations.
• •Own and enhance TD’s physical security risk framework and 2LOD oversight approach, ensuring alignment and interconnectivity across Operational Risk, Operational Resilience, Technology and Cyber Risk, Third Party Risk, Fraud, Human Resources, Corporate Real Estate, Legal, Compliance, Privacy, and other risk and functional areas.
• •Advise senior executives and Board Risk Committees on physical security risk posture, material incidents, top and emerging threats, control themes, and remediation priorities.
• •Establish, maintain, monitor, and report physical security risk appetite statements, measures, metrics, key risk indicators, thresholds, and escalation triggers.
• •Lead independent oversight and effective challenge of TD’s management of physical security risks, including the quality and sufficiency of risk assessments, threat and vulnerability analyses, control strategies, investment priorities, exceptions, risk acceptances, and remediation decisions.
• •Establish and maintain a risk-based 2LOD coverage plan and physical security risk assessment methodology that considers assets, threats, vulnerabilities, consequences, control adequacy, geographic exposure, and concentration or common-cause vulnerabilities.
• •Provide oversight and challenge of physical security capabilities, including protective intelligence, access control, surveillance, alarm monitoring, guarding, premises security, travel and executive protection, incident response, and security technology resilience, without owning or operating first-line controls.
• •Identify, assess, and communicate current and emerging risks, including criminal and violent threats, geopolitical and civil disruption, natural hazards, workplace and retail security risks, and cyber-physical dependencies.
• •Ensure physical security dependencies and vulnerabilities are appropriately reflected in critical operations mapping, scenario analysis, business continuity, crisis management, and recovery arrangements.
• •Maintain independent visibility into material physical security incidents, losses, near misses, and control failures; challenge root-cause analysis and corrective actions; identify cross-enterprise themes; and escalate material or persistent concerns.
• •Provide 2LOD review and challenge of material issues, policy exceptions, and risk acceptances, requiring clear remediation plans, compensating controls, accountable owners, and target dates.
• •Provide risk advice and challenge for material real estate, branch, workplace, technology, security-system, acquisition, outsourcing, and transformation decisions that introduce or materially change physical security risk.
• •Ensure alignment with applicable regulatory expectations and recognized security risk management practices and support regulatory examinations and interactions relating to the mandate.
• •Provide people leadership by hiring top talent, setting goals, developing staff, managing employee performance and compensation decisions, promoting teamwork, driving differentiated performance, and addressing performance issues.

Shared Responsibilities / Decision Authorities

• •Partner with first-line Physical Security, Corporate Real Estate and Facilities, Business Segments, Technology and Cyber Security, Human Resources, Legal, Compliance, Privacy, Fraud, Insider Risk, Financial Crimes, Operational Resilience, Business Continuity, Crisis Management, Third Party Risk Management, Insurance, Internal Audit and other key partner functions to promote an integrated view of physical security risk.
• •Provide advice early in material initiatives without assuming ownership of first-line decisions, controls, procedures, or operations.
• •Approve 2LOD physical security risk methodologies, oversight procedures, coverage plans, reporting standards, and challenge criteria within delegated authority.
• •Recommend physical security risk appetite statements, measures, thresholds, and material changes through applicable governance for approval.
• •Determine the scope, frequency, and intensity of independent 2LOD review and challenge based on risk, materiality, change, and emerging threats.
• •Require escalation, documentation, and tracking of material risks, control gaps, incidents, exceptions, risk acceptances, and unresolved challenge outcomes through established governance and issue-management processes.
• •Provide 2LOD non-objection, objection, concurrence, or recommendation where required by policy, standard, procedure, or delegated authority, and escalate matters that exceed authority or remain unresolved.
• •Commission targeted thematic reviews or deep dives and request timely access to information, expertise, and evidence required to discharge the mandate.

Key Metrics

• •Enterprise-wide role; accountable for independent oversight of physical security risk across TD.
• •Management of physical security risk within established risk appetite, limits, and thresholds.
• •Timely completion and quality of the risk-based 2LOD oversight plan and effective challenge activities.
• •Timely and sustainable remediation of material issues, incidents, control gaps, exceptions, and risk acceptances.
• •Quality and timeliness of material risk escalation and executive, committee, and Board reporting.
• •Regulatory, audit, and independent-review outcomes relevant to the mandate, including repeat or overdue findings.
• •Quality, completeness, and reliability of physical security risk data, aggregation, metrics, and trend analysis.

Impact to External Customer

• •Helps protect customers and colleagues and supports safe, reliable access to TD locations and services through effective independent oversight of physical security risk.
• •Helps protect customer trust by identifying material exposures, challenging the adequacy of controls, and promoting timely remediation and escalation.
• •This key leadership role drives alignment, connectivity, and simplification across non-financial risk management and related functional areas.

Committee Memberships/Defined Roles

• •Provide regular updates to the Operational Risk Oversight Committee.
• •Partner with the US NFRM team to deliver updates to the Operational Risk Management Committee (US), as applicable.
• •Lead or participate in the applicable Physical Security Risk Oversight forum.
• •Participate in material incident, crisis, new initiative, and risk acceptance governance where independent physical security risk oversight is required.
• •Additional committee memberships may be identified as the role evolves.

Skills, Education & Experience

Degree in Risk Management, Security Management, Business, Criminology, Engineering, Emergency Management, Information Systems, or a related